Require invirt-web POSTs to have proper referers